Skip to content

Commit 9ccd014

Browse files
lucasmcdonald3lucasmcdonald3
committed
311
1 parent 970ca3c commit 9ccd014

10 files changed

+273
-107
lines changed

‎buildspec.yml

+79-79
Original file line numberDiff line numberDiff line change
@@ -150,22 +150,22 @@ batch:
150150
# env:
151151
# image: aws/codebuild/standard:5.0
152152

153-
# - identifier: py311_integ
154-
# buildspec: codebuild/py311/integ.yml
155-
# env:
156-
# image: aws/codebuild/standard:7.0
157-
# - identifier: py311_integ_mpl
158-
# buildspec: codebuild/py311/integ_mpl.yml
159-
# env:
160-
# image: aws/codebuild/standard:7.0
161-
# - identifier: py311_examples
162-
# buildspec: codebuild/py311/examples.yml
163-
# env:
164-
# image: aws/codebuild/standard:7.0
165-
# - identifier: py311_examples_mpl
166-
# buildspec: codebuild/py311/examples_mpl.yml
167-
# env:
168-
# image: aws/codebuild/standard:7.0
153+
- identifier: py311_integ
154+
buildspec: codebuild/py311/integ.yml
155+
env:
156+
image: aws/codebuild/standard:7.0
157+
- identifier: py311_integ_mpl
158+
buildspec: codebuild/py311/integ_mpl.yml
159+
env:
160+
image: aws/codebuild/standard:7.0
161+
- identifier: py311_examples
162+
buildspec: codebuild/py311/examples.yml
163+
env:
164+
image: aws/codebuild/standard:7.0
165+
- identifier: py311_examples_mpl
166+
buildspec: codebuild/py311/examples_mpl.yml
167+
env:
168+
image: aws/codebuild/standard:7.0
169169
# - identifier: py311_awses_latest
170170
# buildspec: codebuild/py311/awses_local.yml
171171
# env:
@@ -175,69 +175,69 @@ batch:
175175
# env:
176176
# image: aws/codebuild/standard:7.0
177177
# - identifier: py311_mplawses_latest_mpl
178-
# buildspec: codebuild/py311/mplawses_local_mpl.yml
179-
# env:
180-
# image: aws/codebuild/standard:7.0
181-
# - identifier: py311_decrypt_dafny_esdk_vectors_masterkey
182-
# buildspec: codebuild/py311/decrypt_dafny_esdk_vectors_masterkey.yml
183-
# env:
184-
# image: aws/codebuild/standard:7.0
185-
# - identifier: py311_decrypt_dafny_esdk_vectors_keyrings
186-
# buildspec: codebuild/py311/decrypt_dafny_esdk_vectors_keyrings.yml
187-
# env:
188-
# image: aws/codebuild/standard:7.0
189-
# - identifier: py311_decrypt_net_401_vectors_masterkey
190-
# buildspec: codebuild/py311/decrypt_net_401_vectors_masterkey.yml
191-
# env:
192-
# image: aws/codebuild/standard:7.0
193-
# - identifier: py311_decrypt_net_401_vectors_keyrings
194-
# buildspec: codebuild/py311/decrypt_net_401_vectors_keyrings.yml
195-
# env:
196-
# image: aws/codebuild/standard:7.0
197-
# - identifier: py311_generate_decrypt_vectors_masterkey
198-
# buildspec: codebuild/py311/generate_decrypt_vectors_masterkey.yml
199-
# env:
200-
# image: aws/codebuild/standard:7.0
201-
# - identifier: py311_decrypt_masterkey_with_masterkey
202-
# depend-on:
203-
# - py311_generate_decrypt_vectors_masterkey
204-
# buildspec: codebuild/py311/decrypt_masterkey_with_masterkey.yml
205-
# env:
206-
# image: aws/codebuild/standard:7.0
207-
# - identifier: py311_decrypt_masterkey_with_keyrings
208-
# depend-on:
209-
# - py311_generate_decrypt_vectors_masterkey
210-
# buildspec: codebuild/py311/decrypt_masterkey_with_keyrings.yml
211-
# env:
212-
# image: aws/codebuild/standard:7.0
213-
# - identifier: py311_decrypt_masterkey_with_js
214-
# depend-on:
215-
# - py311_generate_decrypt_vectors_masterkey
216-
# buildspec: codebuild/py311/decrypt_masterkey_with_js.yml
217-
# env:
218-
# image: aws/codebuild/standard:7.0
219-
# - identifier: py311_generate_decrypt_vectors_keyrings
220-
# buildspec: codebuild/py311/generate_decrypt_vectors_keyrings.yml
221-
# env:
222-
# image: aws/codebuild/standard:7.0
223-
# - identifier: py311_decrypt_keyrings_with_masterkey
224-
# depend-on:
225-
# - py311_generate_decrypt_vectors_keyrings
226-
# buildspec: codebuild/py311/decrypt_keyrings_with_masterkey.yml
227-
# env:
228-
# image: aws/codebuild/standard:7.0
229-
# - identifier: py311_decrypt_keyrings_with_keyrings
230-
# depend-on:
231-
# - py311_generate_decrypt_vectors_keyrings
232-
# buildspec: codebuild/py311/decrypt_keyrings_with_keyrings.yml
233-
# env:
234-
# image: aws/codebuild/standard:7.0
235-
# - identifier: py311_decrypt_keyrings_with_js
236-
# depend-on:
237-
# - py311_generate_decrypt_vectors_keyrings
238-
# buildspec: codebuild/py311/decrypt_keyrings_with_js.yml
239-
# env:
240-
# image: aws/codebuild/standard:7.0
178+
# buildspec: codebuild/py311/mplawses_local_mpl.yml
179+
# env:
180+
# image: aws/codebuild/standard:7.0
181+
- identifier: py311_decrypt_dafny_esdk_vectors_masterkey
182+
buildspec: codebuild/py311/decrypt_dafny_esdk_vectors_masterkey.yml
183+
env:
184+
image: aws/codebuild/standard:7.0
185+
- identifier: py311_decrypt_dafny_esdk_vectors_keyrings
186+
buildspec: codebuild/py311/decrypt_dafny_esdk_vectors_keyrings.yml
187+
env:
188+
image: aws/codebuild/standard:7.0
189+
- identifier: py311_decrypt_net_401_vectors_masterkey
190+
buildspec: codebuild/py311/decrypt_net_401_vectors_masterkey.yml
191+
env:
192+
image: aws/codebuild/standard:7.0
193+
- identifier: py311_decrypt_net_401_vectors_keyrings
194+
buildspec: codebuild/py311/decrypt_net_401_vectors_keyrings.yml
195+
env:
196+
image: aws/codebuild/standard:7.0
197+
- identifier: py311_generate_decrypt_vectors_masterkey
198+
buildspec: codebuild/py311/generate_decrypt_vectors_masterkey.yml
199+
env:
200+
image: aws/codebuild/standard:7.0
201+
- identifier: py311_decrypt_masterkey_with_masterkey
202+
depend-on:
203+
- py311_generate_decrypt_vectors_masterkey
204+
buildspec: codebuild/py311/decrypt_masterkey_with_masterkey.yml
205+
env:
206+
image: aws/codebuild/standard:7.0
207+
- identifier: py311_decrypt_masterkey_with_keyrings
208+
depend-on:
209+
- py311_generate_decrypt_vectors_masterkey
210+
buildspec: codebuild/py311/decrypt_masterkey_with_keyrings.yml
211+
env:
212+
image: aws/codebuild/standard:7.0
213+
- identifier: py311_decrypt_masterkey_with_js
214+
depend-on:
215+
- py311_generate_decrypt_vectors_masterkey
216+
buildspec: codebuild/py311/decrypt_masterkey_with_js.yml
217+
env:
218+
image: aws/codebuild/standard:7.0
219+
- identifier: py311_generate_decrypt_vectors_keyrings
220+
buildspec: codebuild/py311/generate_decrypt_vectors_keyrings.yml
221+
env:
222+
image: aws/codebuild/standard:7.0
223+
- identifier: py311_decrypt_keyrings_with_masterkey
224+
depend-on:
225+
- py311_generate_decrypt_vectors_keyrings
226+
buildspec: codebuild/py311/decrypt_keyrings_with_masterkey.yml
227+
env:
228+
image: aws/codebuild/standard:7.0
229+
- identifier: py311_decrypt_keyrings_with_keyrings
230+
depend-on:
231+
- py311_generate_decrypt_vectors_keyrings
232+
buildspec: codebuild/py311/decrypt_keyrings_with_keyrings.yml
233+
env:
234+
image: aws/codebuild/standard:7.0
235+
- identifier: py311_decrypt_keyrings_with_js
236+
depend-on:
237+
- py311_generate_decrypt_vectors_keyrings
238+
buildspec: codebuild/py311/decrypt_keyrings_with_js.yml
239+
env:
240+
image: aws/codebuild/standard:7.0
241241

242242
# - identifier: py312_integ
243243
# buildspec: codebuild/py312/integ.yml

‎codebuild/py311/decrypt_keyrings_with_js.yml

+34
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,34 @@
1+
version: 0.2
2+
3+
env:
4+
variables:
5+
AWS_ENCRYPTION_SDK_PYTHON_INTEGRATION_TEST_AWS_KMS_KEY_ID: >-
6+
arn:aws:kms:us-west-2:658956600833:key/b35311ef1-d8dc-4780-9f5a-55776cbb2f7f
7+
AWS_ENCRYPTION_SDK_PYTHON_INTEGRATION_TEST_AWS_KMS_KEY_ID_2: >-
8+
arn:aws:kms:eu-central-1:658956600833:key/75414c93-5285-4b57-99c9-30c1cf0a22c2
9+
AWS_ENCRYPTION_SDK_PYTHON_INTEGRATION_TEST_AWS_KMS_MRK_KEY_ID_1: >-
10+
arn:aws:kms:us-west-2:658956600833:key/mrk-80bd8ecdcd4342aebd84b7dc9da498a7
11+
AWS_ENCRYPTION_SDK_PYTHON_INTEGRATION_TEST_AWS_KMS_MRK_KEY_ID_2: >-
12+
arn:aws:kms:us-east-1:658956600833:key/mrk-80bd8ecdcd4342aebd84b7dc9da498a7
13+
14+
phases:
15+
install:
16+
runtime-versions:
17+
python: 3.11
18+
commands:
19+
- n 16
20+
# Install the Javascript ESDK run test vectors
21+
- npm install -g @aws-crypto/integration-node
22+
23+
pre_build:
24+
commands:
25+
# Download previously generated vectors
26+
- aws s3 cp s3://generated-vectors-artifacts-bucket/$CODEBUILD_RESOLVED_SOURCE_VERSION/311_keyrings.zip 311_keyrings.zip
27+
# Repackage zip in expected format
28+
- unzip 311_keyrings.zip
29+
- cd 311_keyrings
30+
- zip -r vectors.zip .
31+
build:
32+
commands:
33+
# Decrypt generated vectors with Javascript ESDK
34+
- integration-node decrypt -v vectors.zip

‎codebuild/py311/decrypt_keyrings_with_keyrings.yml

+31
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
version: 0.2
2+
3+
env:
4+
variables:
5+
TOXENV: "py311-full_decrypt"
6+
AWS_ENCRYPTION_SDK_PYTHON_INTEGRATION_TEST_AWS_KMS_KEY_ID: >-
7+
arn:aws:kms:us-west-2:658956600833:key/b35311ef1-d8dc-4780-9f5a-55776cbb2f7f
8+
AWS_ENCRYPTION_SDK_PYTHON_INTEGRATION_TEST_AWS_KMS_KEY_ID_2: >-
9+
arn:aws:kms:eu-central-1:658956600833:key/75414c93-5285-4b57-99c9-30c1cf0a22c2
10+
AWS_ENCRYPTION_SDK_PYTHON_INTEGRATION_TEST_AWS_KMS_MRK_KEY_ID_1: >-
11+
arn:aws:kms:us-west-2:658956600833:key/mrk-80bd8ecdcd4342aebd84b7dc9da498a7
12+
AWS_ENCRYPTION_SDK_PYTHON_INTEGRATION_TEST_AWS_KMS_MRK_KEY_ID_2: >-
13+
arn:aws:kms:us-east-1:658956600833:key/mrk-80bd8ecdcd4342aebd84b7dc9da498a7
14+
15+
phases:
16+
install:
17+
runtime-versions:
18+
python: 3.11
19+
pre_build:
20+
commands:
21+
# Download previously generated vectors
22+
- aws s3 cp s3://generated-vectors-artifacts-bucket/$CODEBUILD_RESOLVED_SOURCE_VERSION/311_keyrings.zip 311_keyrings.zip
23+
- unzip 311_keyrings.zip
24+
build:
25+
commands:
26+
- pip install "tox < 4.0"
27+
- cd test_vector_handlers
28+
- |
29+
tox -- \
30+
--input ../311_keyrings/manifest.json \
31+
--keyrings

‎codebuild/py311/decrypt_keyrings_with_masterkey.yml

+30
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,30 @@
1+
version: 0.2
2+
3+
env:
4+
variables:
5+
TOXENV: "py311-full_decrypt"
6+
AWS_ENCRYPTION_SDK_PYTHON_INTEGRATION_TEST_AWS_KMS_KEY_ID: >-
7+
arn:aws:kms:us-west-2:658956600833:key/b35311ef1-d8dc-4780-9f5a-55776cbb2f7f
8+
AWS_ENCRYPTION_SDK_PYTHON_INTEGRATION_TEST_AWS_KMS_KEY_ID_2: >-
9+
arn:aws:kms:eu-central-1:658956600833:key/75414c93-5285-4b57-99c9-30c1cf0a22c2
10+
AWS_ENCRYPTION_SDK_PYTHON_INTEGRATION_TEST_AWS_KMS_MRK_KEY_ID_1: >-
11+
arn:aws:kms:us-west-2:658956600833:key/mrk-80bd8ecdcd4342aebd84b7dc9da498a7
12+
AWS_ENCRYPTION_SDK_PYTHON_INTEGRATION_TEST_AWS_KMS_MRK_KEY_ID_2: >-
13+
arn:aws:kms:us-east-1:658956600833:key/mrk-80bd8ecdcd4342aebd84b7dc9da498a7
14+
15+
phases:
16+
install:
17+
runtime-versions:
18+
python: 3.11
19+
pre_build:
20+
commands:
21+
# Download previously generated vectors
22+
- aws s3 cp s3://generated-vectors-artifacts-bucket/$CODEBUILD_RESOLVED_SOURCE_VERSION/311_keyrings.zip 311_keyrings.zip
23+
- unzip 311_keyrings.zip
24+
build:
25+
commands:
26+
- pip install "tox < 4.0"
27+
- cd test_vector_handlers
28+
- |
29+
tox -- \
30+
--input ../311_keyrings/manifest.json

‎codebuild/py311/decrypt_masterkey_with_js.yml

+34
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,34 @@
1+
version: 0.2
2+
3+
env:
4+
variables:
5+
AWS_ENCRYPTION_SDK_PYTHON_INTEGRATION_TEST_AWS_KMS_KEY_ID: >-
6+
arn:aws:kms:us-west-2:658956600833:key/b35311ef1-d8dc-4780-9f5a-55776cbb2f7f
7+
AWS_ENCRYPTION_SDK_PYTHON_INTEGRATION_TEST_AWS_KMS_KEY_ID_2: >-
8+
arn:aws:kms:eu-central-1:658956600833:key/75414c93-5285-4b57-99c9-30c1cf0a22c2
9+
AWS_ENCRYPTION_SDK_PYTHON_INTEGRATION_TEST_AWS_KMS_MRK_KEY_ID_1: >-
10+
arn:aws:kms:us-west-2:658956600833:key/mrk-80bd8ecdcd4342aebd84b7dc9da498a7
11+
AWS_ENCRYPTION_SDK_PYTHON_INTEGRATION_TEST_AWS_KMS_MRK_KEY_ID_2: >-
12+
arn:aws:kms:us-east-1:658956600833:key/mrk-80bd8ecdcd4342aebd84b7dc9da498a7
13+
14+
phases:
15+
install:
16+
runtime-versions:
17+
python: 3.11
18+
commands:
19+
- n 16
20+
# Install the Javascript ESDK run test vectors
21+
- npm install -g @aws-crypto/integration-node
22+
23+
pre_build:
24+
commands:
25+
# Download previously generated vectors
26+
- aws s3 cp s3://generated-vectors-artifacts-bucket/$CODEBUILD_RESOLVED_SOURCE_VERSION/311_masterkey.zip 311_masterkey.zip
27+
# Repackage zip in expected format
28+
- unzip 311_masterkey.zip
29+
- cd 311_masterkey
30+
- zip -r vectors.zip .
31+
build:
32+
commands:
33+
# Decrypt generated vectors with Javascript ESDK
34+
- integration-node decrypt -v vectors.zip

‎codebuild/py311/decrypt_masterkey_with_keyrings.yml

+31
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
version: 0.2
2+
3+
env:
4+
variables:
5+
TOXENV: "py311-full_decrypt"
6+
AWS_ENCRYPTION_SDK_PYTHON_INTEGRATION_TEST_AWS_KMS_KEY_ID: >-
7+
arn:aws:kms:us-west-2:658956600833:key/b35311ef1-d8dc-4780-9f5a-55776cbb2f7f
8+
AWS_ENCRYPTION_SDK_PYTHON_INTEGRATION_TEST_AWS_KMS_KEY_ID_2: >-
9+
arn:aws:kms:eu-central-1:658956600833:key/75414c93-5285-4b57-99c9-30c1cf0a22c2
10+
AWS_ENCRYPTION_SDK_PYTHON_INTEGRATION_TEST_AWS_KMS_MRK_KEY_ID_1: >-
11+
arn:aws:kms:us-west-2:658956600833:key/mrk-80bd8ecdcd4342aebd84b7dc9da498a7
12+
AWS_ENCRYPTION_SDK_PYTHON_INTEGRATION_TEST_AWS_KMS_MRK_KEY_ID_2: >-
13+
arn:aws:kms:us-east-1:658956600833:key/mrk-80bd8ecdcd4342aebd84b7dc9da498a7
14+
15+
phases:
16+
install:
17+
runtime-versions:
18+
python: 3.11
19+
pre_build:
20+
commands:
21+
# Download previously generated vectors
22+
- aws s3 cp s3://generated-vectors-artifacts-bucket/$CODEBUILD_RESOLVED_SOURCE_VERSION/311_masterkey.zip 311_masterkey.zip
23+
- unzip 311_masterkey.zip
24+
build:
25+
commands:
26+
- pip install "tox < 4.0"
27+
- cd test_vector_handlers
28+
- |
29+
tox -- \
30+
--input ../311_masterkey/manifest.json \
31+
--keyrings

‎codebuild/py311/decrypt_masterkey_with_masterkey.yml

+30
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,30 @@
1+
version: 0.2
2+
3+
env:
4+
variables:
5+
TOXENV: "py311-full_decrypt"
6+
AWS_ENCRYPTION_SDK_PYTHON_INTEGRATION_TEST_AWS_KMS_KEY_ID: >-
7+
arn:aws:kms:us-west-2:658956600833:key/b35311ef1-d8dc-4780-9f5a-55776cbb2f7f
8+
AWS_ENCRYPTION_SDK_PYTHON_INTEGRATION_TEST_AWS_KMS_KEY_ID_2: >-
9+
arn:aws:kms:eu-central-1:658956600833:key/75414c93-5285-4b57-99c9-30c1cf0a22c2
10+
AWS_ENCRYPTION_SDK_PYTHON_INTEGRATION_TEST_AWS_KMS_MRK_KEY_ID_1: >-
11+
arn:aws:kms:us-west-2:658956600833:key/mrk-80bd8ecdcd4342aebd84b7dc9da498a7
12+
AWS_ENCRYPTION_SDK_PYTHON_INTEGRATION_TEST_AWS_KMS_MRK_KEY_ID_2: >-
13+
arn:aws:kms:us-east-1:658956600833:key/mrk-80bd8ecdcd4342aebd84b7dc9da498a7
14+
15+
phases:
16+
install:
17+
runtime-versions:
18+
python: 3.11
19+
pre_build:
20+
commands:
21+
# Download previously generated vectors
22+
- aws s3 cp s3://generated-vectors-artifacts-bucket/$CODEBUILD_RESOLVED_SOURCE_VERSION/311_masterkey.zip 311_masterkey.zip
23+
- unzip 311_masterkey.zip
24+
build:
25+
commands:
26+
- pip install "tox < 4.0"
27+
- cd test_vector_handlers
28+
- |
29+
tox -- \
30+
--input ../311_masterkey/manifest.json

‎codebuild/py311/decrypt_net_401_vectors_keyrings.yml

-10
Original file line numberDiff line numberDiff line change
@@ -12,23 +12,13 @@ env:
1212
arn:aws:kms:us-west-2:658956600833:key/mrk-80bd8ecdcd4342aebd84b7dc9da498a7
1313
AWS_ENCRYPTION_SDK_PYTHON_INTEGRATION_TEST_AWS_KMS_MRK_KEY_ID_2: >-
1414
arn:aws:kms:us-east-1:658956600833:key/mrk-80bd8ecdcd4342aebd84b7dc9da498a7
15-
AWS_ENCRYPTION_SDK_PYTHON_DECRYPT_ORACLE_API_DEPLOYMENT_ID: "xi1mwx3ttb"
16-
AWS_ENCRYPTION_SDK_PYTHON_DECRYPT_ORACLE_REGION: "us-west-2"
1715
1816
phases:
1917
install:
2018
runtime-versions:
2119
python: 3.11
2220
pre_build:
2321
commands:
24-
# Assume Role to access non-prod resource
25-
- TMP_ROLE=$(aws sts assume-role --role-arn "arn:aws:iam::370957321024:role/GitHub-CI-Public-ESDK-Python-Role-us-west-2" --role-session-name "CB-TestVectorResources")
26-
- export TMP_ROLE
27-
- export AWS_ACCESS_KEY_ID=$(echo "${TMP_ROLE}" | jq -r '.Credentials.AccessKeyId')
28-
- export AWS_SECRET_ACCESS_KEY=$(echo "${TMP_ROLE}" | jq -r '.Credentials.SecretAccessKey')
29-
- export AWS_SESSION_TOKEN=$(echo "${TMP_ROLE}" | jq -r '.Credentials.SessionToken')
30-
- aws sts get-caller-identity
31-
3222
# Fetch ESDK .NET v4.0.1 Test Vectors
3323
- VECTOR_ZIP=$CODEBUILD_SRC_DIR/v4-Net-4.0.1.zip
3424
- VECTORS_URL=https://github.com/aws/aws-encryption-sdk-dafny/raw/mainline/AwsEncryptionSDK/runtimes/net/TestVectorsNative/TestVectors/resources/v4-Net-4.0.1.zip

0 commit comments

Comments
 (0)